RE: JDK 1.6 issues

[George Cowe <gc...@origoservices.com>]

Has anyone used WSS4J with JDK 1.6 and Tomcat 6.0?

 

I still have a problem with a web service signing its response message using an X509 certifcate, WSS4J 1.5.1, Axis 1.4, JDK 1.6 and Tomcat 6.0  

 

The same WSDD files and crypto.properties files are used successfully under JDK 1.5 and Tomcat 5.0..28.

 

Thanks

George  

 

From: George Cowe [mailto:gcowe@origoservices.com] 
Sent: 28 September 2007 15:03
To: wss4j-dev@ws.apache.org
Subject: JDK 1.6 issues

 

JDK 1.6 / Tomcat 6.0 Issue

 

Don't know if anyone else has seen this problem-

I have been using WSS4J 1.5.1 and Axis 1.4 in a web service which is implemented in Tomcat 5.0.28 using JDK 1.5 and it signs messages without any problem.

 

However when I upgrade to Tomcat 6.0 and JDK 1.6 I start getting problems with server side signing. I get the message

 

org.apache.ws.security.WSSecurityException: WSHandler: Signature: error during message procesingorg.apache.ws.security.WSSecurityException: General security error (Unexpected number of X509Data: for Signature)

 

which usually means that the alias for the private key has not been set correctly.

 

However the same configuration files (.wsdd files) are being used in Tomcat 5 and Tomcat 6 so I would expect the same result.

 

What makes it stranger is that I have a client application which is running under Tomcat 6 which signs the inbound message which is then successfully verified by the web service also running under Tomcat 6. The web service then attempts to sign the response and gets the exception above.

 

Anyone seen this already?

 

Thanks

George           

 

 

E-mail disclaimer

 

The information in this e-mail is sent in confidence for the addressee only and may be legally privileged. Unauthorised recipients must preserve this confidentiality and should please advise the sender immediately of the error in transmission and then delete this e-mail. If you are not the intended recipient, any disclosure, copying, distribution or any action taken in reliance on its content is prohibited and may be unlawful.

Origo Services Limited accepts no responsibility for any loss or damage resulting directly or indirectly from the use of this e-mail or the contents.  It is your responsibility to scan for viruses.  Origo Services Limited reserves the right to monitor e-mails sent to or from addresses under its control.  When you reply to this e-mail, you are consenting to Origo Services Limited monitoring the content of the e-mails you send to or receive from Origo Services Limited.  If this e-mail is non-business related
Origo Services Limited is not liable for any opinions expressed by the sender.  The contents of this e-mail are protected by copyright.  All rights reserved.

 

Origo Services Limited is a company incorporated in Scotland (company number 115061) having its registered office at 4th floor, Saltire Court, 20 Castle Terrace, Edinburgh EH1 2EN.



E-mail disclaimer

The information in this e-mail is sent in confidence for the addressee only and may be legally privileged. Unauthorised recipients must preserve this confidentiality and should please advise the sender immediately of the error in transmission and then delete this e-mail. If you are not the intended recipient, any disclosure, copying, distribution or any action taken in reliance on its content is prohibited and may be unlawful.

Origo Services Limited accepts no responsibility for any loss or damage resulting directly or indirectly from the use of this e-mail or the contents.  It is your responsibility to scan for viruses.  Origo Services Limited reserves the right to monitor e-mails sent to or from addresses under its control.  When you reply to this e-mail, you are consenting to Origo Services Limited monitoring the content of the e-mails you send to or receive from Origo Services Limited.  If this e-mail is non-business related Origo Services Limited is not liable for any opinions expressed by the sender.  The contents of this e-mail are protected by copyright.  All rights reserved.

Origo Services Limited is a company incorporated in Scotland (company number 115061) having its registered office at 4th floor, Saltire Court, 20 Castle Terrace, Edinburgh EH1 2EN.